This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json) Hash identifier: kGI8skjbIiRW1MZcjTj99YnQrRlXlXFyJO1Gf21SNAY= Subject key identifier: 49:1C:09:08:50:A7:C8:0C:0F:EC:F4:A4:A7:F9:8C:99:99:F1:3A:16 Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e Certificate serial: 019C4321E134B714360B3BE59DA988C499D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:00:19 +0000 Manifest this update: Mon 09 Feb 2026 16:00:19 +0000 Manifest next update: Tue 10 Feb 2026 16:00:19 +0000 Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: cu1mwK3QGvKZ2d6cLCIzkFtZOLaC13cSQWipMsDYFkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e1:34:b7:14:36:0b:3b:e5:9d:a9:88:c4:99:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e Validity Not Before: Feb 9 16:00:19 2026 GMT Not After : Feb 10 16:00:19 2026 GMT Subject: CN=491c090850a7c80c0fecf4a4a7f98c9999f13a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:f2:45:e1:94:03:ae:be:1c:ed:81:68:58: c1:85:6c:bc:30:1b:d8:2b:74:ad:8e:1c:1d:cc:73: a1:fd:a8:6a:d7:ac:26:bc:97:e3:a5:29:97:77:4c: cd:09:d6:56:74:d2:15:88:5a:b2:20:43:42:46:3c: 72:a1:c6:a5:47:3c:5a:ae:7f:78:1c:3e:98:6a:e7: 1d:d0:e3:67:b8:75:50:81:88:ba:89:df:7b:26:97: 58:d2:aa:33:4a:25:5f:6c:19:d3:09:b5:37:57:7c: ed:96:46:b7:38:23:7d:4c:09:9e:8f:08:2b:74:41: dd:99:f5:33:77:0d:db:fd:cd:ab:40:8b:dc:7e:a7: a1:7f:bf:74:d4:2c:1b:23:36:8c:69:14:9c:01:b4: 17:9a:70:96:05:9d:48:4c:3e:c0:5e:03:31:1e:64: 48:91:8c:25:66:3f:8f:42:ac:c2:d3:64:16:65:17: 00:14:5a:ea:26:52:73:fa:44:11:14:eb:30:b1:39: 6f:0d:29:79:fc:52:2f:12:32:bf:58:ce:16:f7:3d: 4b:5d:66:1b:59:ac:a5:db:9f:a5:59:8f:42:8e:8a: 07:02:6b:83:9c:8c:81:f3:ad:5d:20:f6:72:87:8b: 01:90:d6:3f:89:b2:1e:4b:6c:cf:fa:6a:75:de:4c: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1C:09:08:50:A7:C8:0C:0F:EC:F4:A4:A7:F9:8C:99:99:F1:3A:16 X509v3 Authority Key Identifier: keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d1:ff:18:92:8e:92:d3:f4:5c:1a:d6:5e:90:c1:14:64:4e: b1:2d:03:da:9e:f8:d1:c3:69:8d:e9:f8:f6:11:b2:5e:56:89: de:29:3a:35:fe:2e:26:46:6b:e1:c0:b6:b7:2d:a9:65:02:eb: 6e:8c:75:9e:d5:8c:c0:d6:4e:d5:19:f0:83:9e:a4:57:3a:3e: 0c:07:31:81:4f:8d:1a:f7:82:7f:66:2d:5b:b8:52:0f:e3:c3: 3e:a0:d5:d0:fd:ee:6a:62:32:82:39:b6:de:7c:7e:07:81:7a: a4:03:10:44:c0:34:7c:dd:83:16:64:de:38:c4:86:0a:97:a0: 04:4c:62:9c:cd:04:85:86:b9:ac:fa:13:fe:1c:88:95:22:7a: b1:d0:c8:ed:68:9c:55:83:f8:56:5c:8f:c5:96:7a:90:0d:5f: ff:2e:4b:ca:b0:e7:60:ce:6c:73:b9:af:82:8a:cb:1a:87:76: f9:40:9b:09:43:76:fe:46:c5:fc:7f:d6:e1:20:0e:3d:b1:8e: 92:e7:0c:77:9a:62:0b:17:47:9b:7c:ca:f5:31:1f:b0:62:e0: c0:0a:d8:df:aa:4d:0a:47:82:5f:12:3c:68:e3:ae:0f:6c:4b: 19:c1:bd:5b:19:93:20:1b:cc:ca:88:7a:4f:bc:0c:63:4f:45: 00:b1:46:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeE0txQ2CzvlnamIxJnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWMyYzc3ZjQ0ZDVhYjdjMmFjOTJmZDI5YmFiNTg4OWE5 MDEzMGUwHhcNMjYwMjA5MTYwMDE5WhcNMjYwMjEwMTYwMDE5WjAzMTEwLwYDVQQD Eyg0OTFjMDkwODUwYTdjODBjMGZlY2Y0YTRhN2Y5OGM5OTk5ZjEzYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNLyReGUA66+HO2BaFjBhWy8MBvY K3StjhwdzHOh/ahq16wmvJfjpSmXd0zNCdZWdNIViFqyIENCRjxyocalRzxarn94 HD6Yaucd0ONnuHVQgYi6id97JpdY0qozSiVfbBnTCbU3V3ztlka3OCN9TAmejwgr dEHdmfUzdw3b/c2rQIvcfqehf7901CwbIzaMaRScAbQXmnCWBZ1ITD7AXgMxHmRI kYwlZj+PQqzC02QWZRcAFFrqJlJz+kQRFOswsTlvDSl5/FIvEjK/WM4W9z1LXWYb Wayl25+lWY9CjooHAmuDnIyB861dIPZyh4sBkNY/ibIeS2zP+mp13kx/LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkcCQhQp8gMD+z0pKf5jJmZ8ToWMB8GA1UdIwQY MBaAFEGcLHf0TVq3wqyS/Sm6tYiakBMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVp3c2RfUk5XcmZDckpMOUticTFpSnFRRXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NDg4MGMtNWY5NS00ZmJjLTliZjIt Y2Y1MWUwMzZlZjBlLzEvUVp3c2RfUk5XcmZDckpMOUticTFpSnFRRXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NDg4MGMtNWY5NS00ZmJjLTliZjItY2Y1MWUwMzZlZjBl LzEvUVp3c2RfUk5XcmZDckpMOUticTFpSnFRRXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNH/GJKO ktP0XBrWXpDBFGROsS0D2p740cNpjen49hGyXlaJ3ik6Nf4uJkZr4cC2ty2pZQLr box1ntWMwNZO1Rnwg56kVzo+DAcxgU+NGveCf2YtW7hSD+PDPqDV0P3uamIygjm2 3nx+B4F6pAMQRMA0fN2DFmTeOMSGCpegBExinM0EhYa5rPoT/hyIlSJ6sdDI7Wic VYP4VlyPxZZ6kA1f/y5LyrDnYM5sc7mvgorLGod2+UCbCUN2/kbF/H/W4SAOPbGO kucMd5piCxdHm3zK9TEfsGLgwArY36pNCkeCXxI8aOOuD2xLGcG9WxmTIBvMyoh6 T7wMY09FALFGzw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:08 2026 by rpki-client